From the analysis of [1]}, the final composable secure key length is given by
\(\ell = \Big \lfloor s_{X,0} + s_{X,1} (1 - h(\phi _{X}))- \lambda _{EC} - 6 \log _2 \frac{21}{\epsilon _{s}} - \log _2 \frac{2}{\epsilon _{c}}\Big \rfloor ,\) 
